@anthropic-ai/sdk 0.92.0 → 0.93.0

package/lib/credentials/user-oauth.js

@@ -0,0 +1,130 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userOAuthProvider = userOAuthProvider;
+const credentials_1 = require("../../core/credentials.js");
+const types_1 = require("./types.js");
+const time_1 = require("../../internal/utils/time.js");
+const version_1 = require("../../version.js");
+/**
+ * Reads a user-oauth credential file. Returns the cached access token while
+ * fresh; on expiry performs a `refresh_token` grant and writes the new
+ * tokens back to the credentials file (atomic replace, fsync'd).
+ *
+ * If `clientId` is empty, the access token is treated as static — the
+ * credentials file is read on every call but no refresh is attempted, and
+ * an expired token without a `refresh_token` raises.
+ */
+function userOAuthProvider(config) {
+    return async (opts) => {
+        const fs = await Promise.resolve().then(() => __importStar(require('node:fs')));
+        await (0, types_1.checkCredentialsFileSafety)(config.credentialsPath, config.onSafetyWarning);
+        let raw;
+        try {
+            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');
+        }
+        catch (err) {
+            throw new types_1.WorkloadIdentityError(`Credentials file not found at ${config.credentialsPath}: ${err}`);
+        }
+        let creds;
+        try {
+            creds = JSON.parse(raw);
+        }
+        catch (err) {
+            throw new types_1.WorkloadIdentityError(`Credentials file at ${config.credentialsPath} is not valid JSON: ${err}`);
+        }
+        const accessToken = creds.access_token;
+        if (!accessToken) {
+            throw new types_1.WorkloadIdentityError(`Credentials file at ${config.credentialsPath} must include 'access_token'`);
+        }
+        // Return cached token if still fresh (or no expiry info), unless the
+        // caller is forcing a refresh after a 401 — then go straight to refresh
+        // even if the file's expires_at still looks valid.
+        const expiresAt = creds.expires_at;
+        if (!opts?.forceRefresh &&
+            (expiresAt == null || (0, time_1.nowAsSeconds)() < expiresAt - types_1.MANDATORY_REFRESH_THRESHOLD_IN_SECONDS)) {
+            return { token: accessToken, expiresAt: expiresAt ?? null };
+        }
+        const refreshToken = creds.refresh_token;
+        if (!config.clientId || !refreshToken) {
+            throw new types_1.WorkloadIdentityError(`Access token at ${config.credentialsPath} has expired and no refresh is available ` +
+                `(client_id ${config.clientId ? 'set' : 'empty'}, refresh_token ${refreshToken ? 'set' : 'empty'})`);
+        }
+        (0, types_1.requireSecureTokenEndpoint)(config.baseURL);
+        const body = {
+            grant_type: types_1.GRANT_TYPE_REFRESH_TOKEN,
+            refresh_token: refreshToken,
+            client_id: config.clientId,
+        };
+        const url = `${config.baseURL}${types_1.TOKEN_ENDPOINT}`;
+        let resp;
+        try {
+            resp = await config.fetch(url, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'anthropic-beta': types_1.OAUTH_API_BETA_HEADER,
+                    'User-Agent': config.userAgent || `anthropic-sdk-typescript/${version_1.VERSION} userOAuthProvider`,
+                },
+                body: JSON.stringify(body),
+            });
+        }
+        catch (err) {
+            throw new types_1.WorkloadIdentityError(`User OAuth refresh failed to reach token endpoint: ${err}`);
+        }
+        const requestId = resp.headers.get('Request-Id');
+        if (!resp.ok) {
+            const text = await resp.text().catch(() => '');
+            throw new types_1.WorkloadIdentityError(`User OAuth refresh failed (HTTP ${resp.status}): ${(0, types_1.redactSensitive)(text)}`, resp.status, (0, types_1.redactSensitive)(text), requestId);
+        }
+        const data = await (0, types_1.parseTokenResponse)(resp, requestId);
+        const expiresIn = Number(data.expires_in);
+        if (!Number.isFinite(expiresIn)) {
+            throw new types_1.WorkloadIdentityError(`User OAuth refresh response missing or invalid expires_in: ${JSON.stringify((0, types_1.redactSensitive)(data))}`, resp.status, (0, types_1.redactSensitive)(data), requestId);
+        }
+        const newExpiresAt = (0, time_1.nowAsSeconds)() + expiresIn;
+        const newRefreshToken = data.refresh_token || refreshToken;
+        await (0, types_1.writeCredentialsFileAtomic)(config.credentialsPath, {
+            ...creds,
+            version: credentials_1.CREDENTIALS_FILE_VERSION,
+            type: 'oauth_token',
+            access_token: data.access_token,
+            expires_at: newExpiresAt,
+            refresh_token: newRefreshToken,
+        });
+        return { token: data.access_token, expiresAt: newExpiresAt };
+    };
+}
+//# sourceMappingURL=user-oauth.js.map

package/lib/credentials/user-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-oauth.js","sourceRoot":"","sources":["../../src/lib/credentials/user-oauth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,8CA2GC;AA9ID,2DAA6F;AAE7F,sCAWiB;AACjB,uDAAyD;AACzD,8CAAwC;AAWxC;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,MAAuB;IACvD,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,MAAM,EAAE,GAAG,wDAAa,SAAS,GAAC,CAAC;QAEnC,MAAM,IAAA,kCAA0B,EAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAEjF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,6BAAqB,CAAC,iCAAiC,MAAM,CAAC,eAAe,KAAK,GAAG,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,KAA2B,CAAC;QAChC,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,6BAAqB,CAC7B,uBAAuB,MAAM,CAAC,eAAe,uBAAuB,GAAG,EAAE,CAC1E,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,6BAAqB,CAC7B,uBAAuB,MAAM,CAAC,eAAe,8BAA8B,CAC5E,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,wEAAwE;QACxE,mDAAmD;QACnD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IACE,CAAC,IAAI,EAAE,YAAY;YACnB,CAAC,SAAS,IAAI,IAAI,IAAI,IAAA,mBAAY,GAAE,GAAG,SAAS,GAAG,8CAAsC,CAAC,EAC1F,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YACtC,MAAM,IAAI,6BAAqB,CAC7B,mBAAmB,MAAM,CAAC,eAAe,2CAA2C;gBAClF,cAAc,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,mBAAmB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,CACtG,CAAC;QACJ,CAAC;QAED,IAAA,kCAA0B,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,IAAI,GAA2B;YACnC,UAAU,EAAE,gCAAwB;YACpC,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,MAAM,CAAC,QAAQ;SAC3B,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,sBAAc,EAAE,CAAC;QACjD,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC7B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,gBAAgB,EAAE,6BAAqB;oBACvC,YAAY,EAAE,MAAM,CAAC,SAAS,IAAI,4BAA4B,iBAAO,oBAAoB;iBAC1F;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,6BAAqB,CAAC,sDAAsD,GAAG,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEjD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,IAAI,6BAAqB,CAC7B,mCAAmC,IAAI,CAAC,MAAM,MAAM,IAAA,uBAAe,EAAC,IAAI,CAAC,EAAE,EAC3E,IAAI,CAAC,MAAM,EACX,IAAA,uBAAe,EAAC,IAAI,CAAC,EACrB,SAAS,CACV,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAkB,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,6BAAqB,CAC7B,8DAA8D,IAAI,CAAC,SAAS,CAAC,IAAA,uBAAe,EAAC,IAAI,CAAC,CAAC,EAAE,EACrG,IAAI,CAAC,MAAM,EACX,IAAA,uBAAe,EAAC,IAAI,CAAC,EACrB,SAAS,CACV,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,IAAA,mBAAY,GAAE,GAAG,SAAS,CAAC;QAChD,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,IAAI,YAAY,CAAC;QAE3D,MAAM,IAAA,kCAA0B,EAAC,MAAM,CAAC,eAAe,EAAE;YACvD,GAAG,KAAK;YACR,OAAO,EAAE,sCAAwB;YACjC,IAAI,EAAE,aAAa;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,YAAY;YACxB,aAAa,EAAE,eAAe;SAC/B,CAAC,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IAC/D,CAAC,CAAC;AACJ,CAAC"}

package/lib/credentials/user-oauth.mjs

@@ -0,0 +1,94 @@
+import { CREDENTIALS_FILE_VERSION } from "../../core/credentials.mjs";
+import { GRANT_TYPE_REFRESH_TOKEN, MANDATORY_REFRESH_THRESHOLD_IN_SECONDS, OAUTH_API_BETA_HEADER, TOKEN_ENDPOINT, WorkloadIdentityError, checkCredentialsFileSafety, parseTokenResponse, redactSensitive, requireSecureTokenEndpoint, writeCredentialsFileAtomic, } from "./types.mjs";
+import { nowAsSeconds } from "../../internal/utils/time.mjs";
+import { VERSION } from "../../version.mjs";
+/**
+ * Reads a user-oauth credential file. Returns the cached access token while
+ * fresh; on expiry performs a `refresh_token` grant and writes the new
+ * tokens back to the credentials file (atomic replace, fsync'd).
+ *
+ * If `clientId` is empty, the access token is treated as static — the
+ * credentials file is read on every call but no refresh is attempted, and
+ * an expired token without a `refresh_token` raises.
+ */
+export function userOAuthProvider(config) {
+    return async (opts) => {
+        const fs = await import('node:fs');
+        await checkCredentialsFileSafety(config.credentialsPath, config.onSafetyWarning);
+        let raw;
+        try {
+            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');
+        }
+        catch (err) {
+            throw new WorkloadIdentityError(`Credentials file not found at ${config.credentialsPath}: ${err}`);
+        }
+        let creds;
+        try {
+            creds = JSON.parse(raw);
+        }
+        catch (err) {
+            throw new WorkloadIdentityError(`Credentials file at ${config.credentialsPath} is not valid JSON: ${err}`);
+        }
+        const accessToken = creds.access_token;
+        if (!accessToken) {
+            throw new WorkloadIdentityError(`Credentials file at ${config.credentialsPath} must include 'access_token'`);
+        }
+        // Return cached token if still fresh (or no expiry info), unless the
+        // caller is forcing a refresh after a 401 — then go straight to refresh
+        // even if the file's expires_at still looks valid.
+        const expiresAt = creds.expires_at;
+        if (!opts?.forceRefresh &&
+            (expiresAt == null || nowAsSeconds() < expiresAt - MANDATORY_REFRESH_THRESHOLD_IN_SECONDS)) {
+            return { token: accessToken, expiresAt: expiresAt ?? null };
+        }
+        const refreshToken = creds.refresh_token;
+        if (!config.clientId || !refreshToken) {
+            throw new WorkloadIdentityError(`Access token at ${config.credentialsPath} has expired and no refresh is available ` +
+                `(client_id ${config.clientId ? 'set' : 'empty'}, refresh_token ${refreshToken ? 'set' : 'empty'})`);
+        }
+        requireSecureTokenEndpoint(config.baseURL);
+        const body = {
+            grant_type: GRANT_TYPE_REFRESH_TOKEN,
+            refresh_token: refreshToken,
+            client_id: config.clientId,
+        };
+        const url = `${config.baseURL}${TOKEN_ENDPOINT}`;
+        let resp;
+        try {
+            resp = await config.fetch(url, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'anthropic-beta': OAUTH_API_BETA_HEADER,
+                    'User-Agent': config.userAgent || `anthropic-sdk-typescript/${VERSION} userOAuthProvider`,
+                },
+                body: JSON.stringify(body),
+            });
+        }
+        catch (err) {
+            throw new WorkloadIdentityError(`User OAuth refresh failed to reach token endpoint: ${err}`);
+        }
+        const requestId = resp.headers.get('Request-Id');
+        if (!resp.ok) {
+            const text = await resp.text().catch(() => '');
+            throw new WorkloadIdentityError(`User OAuth refresh failed (HTTP ${resp.status}): ${redactSensitive(text)}`, resp.status, redactSensitive(text), requestId);
+        }
+        const data = await parseTokenResponse(resp, requestId);
+        const expiresIn = Number(data.expires_in);
+        if (!Number.isFinite(expiresIn)) {
+            throw new WorkloadIdentityError(`User OAuth refresh response missing or invalid expires_in: ${JSON.stringify(redactSensitive(data))}`, resp.status, redactSensitive(data), requestId);
+        }
+        const newExpiresAt = nowAsSeconds() + expiresIn;
+        const newRefreshToken = data.refresh_token || refreshToken;
+        await writeCredentialsFileAtomic(config.credentialsPath, {
+            ...creds,
+            version: CREDENTIALS_FILE_VERSION,
+            type: 'oauth_token',
+            access_token: data.access_token,
+            expires_at: newExpiresAt,
+            refresh_token: newRefreshToken,
+        });
+        return { token: data.access_token, expiresAt: newExpiresAt };
+    };
+}
+//# sourceMappingURL=user-oauth.mjs.map

package/lib/credentials/user-oauth.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-oauth.mjs","sourceRoot":"","sources":["../../src/lib/credentials/user-oauth.ts"],"names":[],"mappings":"OACO,EAAE,wBAAwB,EAA6B;OAEvD,EACL,wBAAwB,EACxB,sCAAsC,EACtC,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe,EACf,0BAA0B,EAC1B,0BAA0B,GAC3B;OACM,EAAE,YAAY,EAAE;OAChB,EAAE,OAAO,EAAE;AAWlB;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAuB;IACvD,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAEnC,MAAM,0BAA0B,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAEjF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,MAAM,CAAC,eAAe,KAAK,GAAG,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,KAA2B,CAAC;QAChC,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,qBAAqB,CAC7B,uBAAuB,MAAM,CAAC,eAAe,uBAAuB,GAAG,EAAE,CAC1E,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,qBAAqB,CAC7B,uBAAuB,MAAM,CAAC,eAAe,8BAA8B,CAC5E,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,wEAAwE;QACxE,mDAAmD;QACnD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IACE,CAAC,IAAI,EAAE,YAAY;YACnB,CAAC,SAAS,IAAI,IAAI,IAAI,YAAY,EAAE,GAAG,SAAS,GAAG,sCAAsC,CAAC,EAC1F,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YACtC,MAAM,IAAI,qBAAqB,CAC7B,mBAAmB,MAAM,CAAC,eAAe,2CAA2C;gBAClF,cAAc,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,mBAAmB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,CACtG,CAAC;QACJ,CAAC;QAED,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,IAAI,GAA2B;YACnC,UAAU,EAAE,wBAAwB;YACpC,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,MAAM,CAAC,QAAQ;SAC3B,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,cAAc,EAAE,CAAC;QACjD,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC7B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,gBAAgB,EAAE,qBAAqB;oBACvC,YAAY,EAAE,MAAM,CAAC,SAAS,IAAI,4BAA4B,OAAO,oBAAoB;iBAC1F;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,qBAAqB,CAAC,sDAAsD,GAAG,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEjD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,IAAI,qBAAqB,CAC7B,mCAAmC,IAAI,CAAC,MAAM,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAC3E,IAAI,CAAC,MAAM,EACX,eAAe,CAAC,IAAI,CAAC,EACrB,SAAS,CACV,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,qBAAqB,CAC7B,8DAA8D,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EACrG,IAAI,CAAC,MAAM,EACX,eAAe,CAAC,IAAI,CAAC,EACrB,SAAS,CACV,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,YAAY,EAAE,GAAG,SAAS,CAAC;QAChD,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,IAAI,YAAY,CAAC;QAE3D,MAAM,0BAA0B,CAAC,MAAM,CAAC,eAAe,EAAE;YACvD,GAAG,KAAK;YACR,OAAO,EAAE,wBAAwB;YACjC,IAAI,EAAE,aAAa;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,YAAY;YACxB,aAAa,EAAE,eAAe;SAC/B,CAAC,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IAC/D,CAAC,CAAC;AACJ,CAAC"}

package/lib/credentials.d.mts

@@ -0,0 +1,4 @@
+export { type AccessToken, type AccessTokenProvider } from "./credentials/types.mjs";
+export { type AnthropicConfig, type AuthenticationInfo, loadConfig } from "../core/credentials.mjs";
+export { resolveCredentialsFromConfig } from "./credentials/credential-chain.mjs";
+//# sourceMappingURL=credentials.d.mts.map

package/lib/credentials.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.mts","sourceRoot":"","sources":["../src/lib/credentials.ts"],"names":[],"mappings":"OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,mBAAmB,EAAE;OAC9C,EAAE,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAE,UAAU,EAAE;OAC7D,EAAE,4BAA4B,EAAE"}

package/lib/credentials.d.ts

@@ -0,0 +1,4 @@
+export { type AccessToken, type AccessTokenProvider } from "./credentials/types.js";
+export { type AnthropicConfig, type AuthenticationInfo, loadConfig } from "../core/credentials.js";
+export { resolveCredentialsFromConfig } from "./credentials/credential-chain.js";
+//# sourceMappingURL=credentials.d.ts.map

package/lib/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/lib/credentials.ts"],"names":[],"mappings":"OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,mBAAmB,EAAE;OAC9C,EAAE,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAE,UAAU,EAAE;OAC7D,EAAE,4BAA4B,EAAE"}

package/lib/credentials.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveCredentialsFromConfig = exports.loadConfig = void 0;
+var credentials_1 = require("../core/credentials.js");
+Object.defineProperty(exports, "loadConfig", { enumerable: true, get: function () { return credentials_1.loadConfig; } });
+var credential_chain_1 = require("./credentials/credential-chain.js");
+Object.defineProperty(exports, "resolveCredentialsFromConfig", { enumerable: true, get: function () { return credential_chain_1.resolveCredentialsFromConfig; } });
+//# sourceMappingURL=credentials.js.map

package/lib/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/lib/credentials.ts"],"names":[],"mappings":";;;AACA,sDAAgG;AAAxC,yGAAA,UAAU,OAAA;AAClE,sEAA8E;AAArE,gIAAA,4BAA4B,OAAA"}

package/lib/credentials.mjs

@@ -0,0 +1,3 @@
+export { loadConfig } from "../core/credentials.mjs";
+export { resolveCredentialsFromConfig } from "./credentials/credential-chain.mjs";
+//# sourceMappingURL=credentials.mjs.map

package/lib/credentials.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.mjs","sourceRoot":"","sources":["../src/lib/credentials.ts"],"names":[],"mappings":"OACO,EAAiD,UAAU,EAAE;OAC7D,EAAE,4BAA4B,EAAE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/sdk",
-  "version": "0.92.0",
+  "version": "0.93.0",
   "description": "The official TypeScript library for the Anthropic API",
   "author": "Anthropic <support@anthropic.com>",
   "types": "./index.d.ts",